On Thu, Jul 01, 2010 at 02:46:19PM -0500, Noel Jones wrote:
> On 7/1/2010 2:15 PM, David Hill wrote:
> >On Thu, Jul 01, 2010 at 02:35:22PM -0400, Wietse Venema wrote:
> >>David Hill:
> >>>Hello,
> >>>
> >>>I am using Postfix 2.7.1. The header_checks manpage says REJECT will
> >>>insert a default enhanced status code of 5.7.1 if the optional text is
> >>>not specified. However, the server gives back 450 4.7.1.
> >>>
> >>>220 mail.server.com ESMTP Postfix
> >>>EHLO hostname
> >>>250-mail.server.com
> >>>250-PIPELINING
> >>>250-SIZE 35651584
> >>>250-ETRN
> >>>250-STARTTLS
> >>>250-ENHANCEDSTATUSCODES
> >>>250-8BITMIME
> >>>250 DSN
> >>>MAIL FROM:<[email protected]>
> >>>250 2.1.0 Ok
> >>>RCPT TO:<[email protected]>
> >>>250 2.1.5 Ok
> >>>DATA
> >>>354 End data with<CR><LF>.<CR><LF>
> >>>Subject: Viagra
> >>>
> >>>.
> >>>450 4.7.1 Spam.
> >>>
> >>>/var/log/maillog shows 5.7.1 was returned?
> >>>Jul 1 11:16:18 mail postfix/cleanup[28982]: 01B6B72347: reject: header
> >>>Subject: Viagra from localhost[127.0.0.1];
> >>>from=<[email protected]> to=<[email protected]> proto=ESMTP
> >>>helo=<hostname>: 5.7.1 Spam
> >>>
> >>># grep Viagra /etc/postfix/config/header_checks
> >>>/^Subject:.*Viagra/ REJECT 5.7.1 Spam.
> >>>
> >>># /usr/local/sbin/postconf | grep ^header_checks
> >>>header_checks = pcre:/etc/postfix/config/header_checks
> >>>
> >>>What am I doing wrong?
> >>
> >>As I replied to your direct mail, Postfix has 600+ configuration
> >>parameters. For a proper problem report see
> >>http://www.postfix.org/DEBUG_README.html#mail
> >>
> >> Wietse
> >
> >I changed header_checks to just the following:
> >/^Subject:.*Viagra/ REJECT
> >
> >I used ktrace and kdump and see this... (snippet)
>
>
> In the unlikely event we need to see ktrace/kdump output, we'll ask
> for it.
>
> What we do need to see is detailed here:
> http://www.postfix.org/DEBUG_README.html#mail
>
> -- Noel Jones
You have the summary, error messages, postfix logging, a ktrace, and now
here is postfinger.
postfinger - postfix configuration on Thu Jul 1 15:51:20 EDT 2010
version: 1.30
--System Parameters--
mail_version = 2.7.1
hostname = hostname
uname = OpenBSD hostname 4.7 GENERIC.MP#3 macppc
--Packaging information--
--main.cf non-default parameters--
command_directory = /usr/local/sbin
daemon_directory = /usr/local/libexec/postfix
disable_vrfy_command = yes
header_checks = pcre:/etc/postfix/config/header_checks
html_directory = /usr/local/share/doc/postfix/html
inet_protocols = all
mail_owner = _postfix
mailq_path = /usr/local/sbin/mailq
message_size_limit = 35651584
newaliases_path = /usr/local/sbin/newaliases
readme_directory = /usr/local/share/doc/postfix/readme
sendmail_path = /usr/local/sbin/sendmail
setgid_group = _postdrop
smtp_tls_loglevel = 1
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_client_restrictions = permit_mynetworks check_client_access
cidr:/etc/postfix/config/mindcry-client_access
reject_unknown_reverse_client_hostname reject_rbl_client bl.spamcop.net
smtpd_data_restrictions = reject_unauth_pipelining
reject_multi_recipient_bounce
smtpd_etrn_restrictions = permit_mynetworks reject
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated
check_helo_access hash:/etc/postfix/config/mindcry-helo_checks
reject_invalid_helo_hostname
smtpd_recipient_restrictions = reject_non_fqdn_recipient
reject_unknown_recipient_domain permit_mynetworks
permit_sasl_authenticated reject_unauth_destination
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = reject_non_fqdn_sender
reject_unknown_sender_domain
smtpd_tls_CAfile = /etc/postfix/tls/hostname.pem
smtpd_tls_cert_file = /etc/postfix/tls/hostname.pem
smtpd_tls_key_file = /etc/postfix/tls/hostname.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_use_tls = yes
soft_bounce = yes
strict_rfc821_envelopes = yes
virtual_alias_maps = hash:/etc/postfix/config/mail-virtual_aliases
virtual_gid_maps = static:32767
virtual_mailbox_base = /
virtual_mailbox_domains = hash:/etc/postfix/config/mail-virtual_domains
virtual_mailbox_maps = hash:/etc/postfix/config/mail-virtual_users
virtual_minimum_uid = 32767
virtual_transport = dovecot
virtual_uid_maps = static:32767
--master.cf--
dovecot unix - n n - - pipe
flags=DRhu user=nobody:nobody argv=/usr/local/libexec/dovecot/deliver
-f ${sender} -d ${recipient}
smtp inet n - - - - smtpd
submission inet n - - - - smtpd
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - - 300 1 qmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
-o smtp_fallback_relay=
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
-- end of postfinger output --